
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File: KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier: qtn6jmdfUbAa5XQSGGrY4eoE4/jwA1oxHKHUkjQdQTc=
Subject key identifier: 91:49:6F:88:56:66:57:9C:AE:05:5C:BA:6D:09:FB:13:E3:5A:D7:9E
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer: /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial: 0204
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number: 0203
Signing time: Wed 05 Nov 2025 04:38:23 +0000
Manifest this update: Wed 05 Nov 2025 04:38:23 +0000
Manifest next update: Fri 07 Nov 2025 04:38:22 +0000
Files and hashes: 1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: t172A1HTesmbc2RkBpFQueJ5zRBhJNeJpoO4d2WQnR0=)
2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
Validity
Not Before: Nov 5 04:38:23 2025 GMT
Not After : Nov 7 04:38:22 2025 GMT
Subject: CN=690ad4bf-b346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:e1:27:39:3a:3c:74:aa:2d:e6:98:7b:d6:
38:00:7e:94:96:cc:d1:33:de:71:e5:56:57:0d:b2:
03:be:20:9a:e3:63:f0:63:92:9e:89:59:ec:10:2a:
a4:fa:29:ba:8c:45:f8:4f:28:e2:af:a3:85:ad:2a:
44:eb:75:5f:27:10:2f:ee:43:52:46:b2:c9:fb:10:
7c:0d:82:ff:79:de:3f:b5:e6:e7:64:21:cb:65:0c:
1d:9a:4f:70:41:7d:da:3e:c3:8d:02:3a:2c:8c:25:
5a:9a:9e:36:47:5a:35:2b:c0:36:68:4b:53:0b:ee:
3c:3a:6b:4b:01:02:3a:09:0b:46:5b:23:3a:7c:41:
7e:cb:2e:8a:ed:55:4c:a3:b1:9e:1d:d0:98:d0:54:
eb:d0:14:b2:cd:d9:e6:3e:40:13:1d:45:de:ae:44:
59:8f:42:76:3d:2e:9e:8f:de:ee:f7:80:09:b1:08:
ee:a9:a6:70:eb:b1:c5:ad:9f:d0:d2:57:3f:7b:6d:
24:5a:c1:5c:a3:09:5c:f3:09:bd:73:86:ce:28:3c:
dc:31:9f:b8:c0:9a:be:a4:d5:29:02:1a:47:6f:59:
ae:99:11:80:0f:2c:dc:4d:dd:81:4a:71:82:5a:fc:
77:af:61:54:81:0f:51:87:0f:4d:f9:a7:9b:f7:c2:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:6F:88:56:66:57:9C:AE:05:5C:BA:6D:09:FB:13:E3:5A:D7:9E
X509v3 Authority Key Identifier:
keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:09:65:47:04:81:5d:50:df:aa:51:df:2f:ca:bb:fb:15:0c:
86:1e:6c:c2:14:78:ca:d4:a6:28:34:d3:f1:7b:18:69:9c:20:
9c:05:3d:d1:33:3e:1a:94:f9:b8:f3:2f:9c:65:59:62:78:29:
65:ce:54:ba:0b:6b:7b:b6:1d:35:63:af:f6:69:92:57:be:97:
b1:43:dd:cf:e2:3d:3c:db:cb:94:5e:da:ff:4c:5b:70:3f:62:
34:52:77:00:a3:72:a2:00:98:e5:1e:67:cf:9a:a5:27:43:e9:
2d:98:41:0e:f2:19:5c:75:73:aa:07:c7:cb:21:59:49:f0:73:
0a:7d:0b:c0:62:65:d9:89:2c:c6:d1:8b:55:83:32:d6:cc:8a:
dd:bd:e4:a0:0e:27:aa:a1:1e:5e:dd:3e:b8:c8:6d:79:f4:50:
3d:7e:5b:4e:cc:45:75:c2:13:f5:a8:ac:85:6b:d5:c2:ac:81:
5c:ae:71:79:1e:53:9b:66:16:d1:9a:9b:41:1f:e9:7b:a3:7c:
6f:67:92:82:b0:4d:36:d7:7e:e0:e8:7c:3f:b0:a4:9b:81:ec:
85:4e:8a:c7:75:33:34:43:43:3b:c9:fb:64:93:e0:65:ce:e5:
bd:96:d6:00:20:b3:8a:68:c2:bc:b1:88:fb:14:63:4a:6f:e5:
d2:04:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:59 2025 by rpki-client